Example #1
0
		public Csvm(IDeobfuscatorContext deobfuscatorContext, ModuleDefMD module, Csvm oldOne) {
			this.deobfuscatorContext = deobfuscatorContext;
			this.module = module;
			if (oldOne.resource != null)
				this.resource = (EmbeddedResource)module.Resources[oldOne.module.Resources.IndexOf(oldOne.resource)];
			if (oldOne.vmAssemblyRef != null)
				this.vmAssemblyRef = module.ResolveAssemblyRef(oldOne.vmAssemblyRef.Rid);
		}
Example #2
0
 public Csvm(IDeobfuscatorContext deobfuscatorContext, ModuleDefMD module, Csvm oldOne)
 {
     this.deobfuscatorContext = deobfuscatorContext;
     this.module = module;
     if (oldOne.resource != null)
     {
         resource = (EmbeddedResource)module.Resources[oldOne.module.Resources.IndexOf(oldOne.resource)];
     }
     if (oldOne.vmAssemblyRef != null)
     {
         vmAssemblyRef = module.ResolveAssemblyRef(oldOne.vmAssemblyRef.Rid);
     }
 }
Example #3
0
 protected override void ScanForObfuscator()
 {
     FindCliSecureAttribute();
     cliSecureRtType = new CliSecureRtType(Module);
     cliSecureRtType.Find(ModuleBytes);
     stringDecrypter = new StringDecrypter(Module, cliSecureRtType.StringDecrypterInfos);
     stringDecrypter.Find();
     resourceDecrypter = new ResourceDecrypter(Module);
     resourceDecrypter.Find();
     proxyCallFixer = new ProxyCallFixer(Module);
     proxyCallFixer.FindDelegateCreator();
     csvmV1 = new vm.v1.Csvm(DeobfuscatedFile.DeobfuscatorContext, Module);
     csvmV1.Find();
     csvmV2 = new vm.v2.Csvm(DeobfuscatedFile.DeobfuscatorContext, Module);
     csvmV2.Find();
 }
Example #4
0
		protected override void ScanForObfuscator() {
			FindCliSecureAttribute();
			cliSecureRtType = new CliSecureRtType(module);
			cliSecureRtType.Find(ModuleBytes);
			stringDecrypter = new StringDecrypter(module, cliSecureRtType.StringDecrypterInfos);
			stringDecrypter.Find();
			resourceDecrypter = new ResourceDecrypter(module);
			resourceDecrypter.Find();
			proxyCallFixer = new ProxyCallFixer(module);
			proxyCallFixer.FindDelegateCreator();
			csvmV1 = new vm.v1.Csvm(DeobfuscatedFile.DeobfuscatorContext, module);
			csvmV1.Find();
			csvmV2 = new vm.v2.Csvm(DeobfuscatedFile.DeobfuscatorContext, module);
			csvmV2.Find();
		}